CVE

Id
31224  
CVE No.
CVE-2008-1107  
Status
Candidate  
Description
Multiple stack-based buffer overflows in the Danske Bank e-Sec Control Module ActiveX control (DanskeSikker.ocx) 3.1.0.48, and possibly earlier versions, allow remote attackers to execute arbitrary code via long arguments to unspecified methods, which are not properly handled by a logging function.  
Phase
Assigned (20080229)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
333229 31224 CVE-2008-1107 BUGTRAQ:20090416 Secunia Research: Danske Bank e-Sec Control Module Error Logging Buffer Overflow  View
333230 31224 CVE-2008-1107 URL:http://www.securityfocus.com/archive/1/archive/1/502725/100/0/threaded  View
333231 31224 CVE-2008-1107 MISC:http://secunia.com/secunia_research/2008-17/  View
333232 31224 CVE-2008-1107 BID:34549  View
333233 31224 CVE-2008-1107 URL:http://www.securityfocus.com/bid/34549  View
333234 31224 CVE-2008-1107 OSVDB:53715  View
333235 31224 CVE-2008-1107 URL:http://osvdb.org/53715  View
333236 31224 CVE-2008-1107 SECUNIA:29635  View
333237 31224 CVE-2008-1107 URL:http://secunia.com/advisories/29635  View
333238 31224 CVE-2008-1107 VUPEN:ADV-2009-1047  View
333239 31224 CVE-2008-1107 URL:http://www.vupen.com/english/advisories/2009/1047  View
333240 31224 CVE-2008-1107 XF:danske-esec-activex-bo(49903)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
48866 JVNDB-2008-004176 lighttpd の mod_cgi における重要な情報を取得される脆弱性 lighttpd の mod_cgi は、fork 失敗が発生した場合、エラー 500 ではなく CGI スクリプトのソースコードを送信するため、重要な情報を取得される脆弱性が存在します。 CVE-2008-1111 31224 5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-004176.html  View